diff --git a/WORKSPACE b/WORKSPACE
index 56586a312458..80fe58604e90 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -1076,7 +1076,7 @@ go_repository(
 
 # Change this and the pilot/docker/Dockerfile.proxy* files together
 # This SHA is obtained from proxy/postsubmit job
-ISTIO_PROXY_BUCKET = "e4a0005725b1f117b28c120d3a526ee4ca8cfbef"
+ISTIO_PROXY_BUCKET = "a09fc9fc389333b888c3ab1ebf1f79c923a3d0e3"
 
 http_file(
     name = "envoy_binary",
diff --git a/istio.VERSION b/istio.VERSION
index 42e60f82c002..ce510f8858fe 100644
--- a/istio.VERSION
+++ b/istio.VERSION
@@ -7,7 +7,7 @@ export MIXER_TAG="5253b6b574a98b209c0ef3d0d6e90c1b8d6a5c2a"
 export PILOT_HUB="gcr.io/istio-testing"
 export PILOT_TAG="3101ea9d82a5f83b699c2d3245b371a19fa6bef4"
 export ISTIOCTL_URL="https://storage.googleapis.com/istio-artifacts/pilot/3101ea9d82a5f83b699c2d3245b371a19fa6bef4/artifacts/istioctl"
-export PROXY_TAG="e4a0005725b1f117b28c120d3a526ee4ca8cfbef"
+export PROXY_TAG="a09fc9fc389333b888c3ab1ebf1f79c923a3d0e3"
 export ISTIO_NAMESPACE="istio-system"
 export AUTH_DEBIAN_URL="https://storage.googleapis.com/istio-artifacts/auth/d10e0c4aa05ca726cae71aa5d033dea4f7bc26e4/artifacts/debs"
 export PILOT_DEBIAN_URL="https://storage.googleapis.com/istio-artifacts/pilot/3101ea9d82a5f83b699c2d3245b371a19fa6bef4/artifacts/debs"
diff --git a/istio.deps b/istio.deps
index f0df7c3f48d8..976bdf318b89 100644
--- a/istio.deps
+++ b/istio.deps
@@ -11,27 +11,27 @@
 		"repoName": "proxy",
 		"prodBranch": "master",
 		"file": "WORKSPACE",
-		"lastStableSHA": "e4a0005725b1f117b28c120d3a526ee4ca8cfbef"
+		"lastStableSHA": "a09fc9fc389333b888c3ab1ebf1f79c923a3d0e3"
 	},
 	{
 		"name": "/envoy",
 		"repoName": "proxy",
 		"prodBranch": "master",
 		"file": "pilot/docker/Dockerfile.proxy",
-		"lastStableSHA": "e4a0005725b1f117b28c120d3a526ee4ca8cfbef"
+		"lastStableSHA": "a09fc9fc389333b888c3ab1ebf1f79c923a3d0e3"
 	},
 	{
 		"name": "/envoy-debug",
 		"repoName": "proxy",
 		"prodBranch": "master",
 		"file": "pilot/docker/Dockerfile.proxy_debug",
-		"lastStableSHA": "e4a0005725b1f117b28c120d3a526ee4ca8cfbef"
+		"lastStableSHA": "a09fc9fc389333b888c3ab1ebf1f79c923a3d0e3"
 	},
 	{
 		"name": "PROXY_TAG",
 		"repoName": "proxy",
 		"prodBranch": "master",
 		"file": "istio.VERSION",
-		"lastStableSHA": "e4a0005725b1f117b28c120d3a526ee4ca8cfbef"
+		"lastStableSHA": "a09fc9fc389333b888c3ab1ebf1f79c923a3d0e3"
 	}
 ]
\ No newline at end of file
diff --git a/pilot/docker/Dockerfile.proxy b/pilot/docker/Dockerfile.proxy
index dd12b03ef999..3c076d13dc86 100644
--- a/pilot/docker/Dockerfile.proxy
+++ b/pilot/docker/Dockerfile.proxy
@@ -1,5 +1,5 @@
 # Change this and ../../WORKSPACE at the same time
-FROM gcr.io/istio-testing/envoy:e4a0005725b1f117b28c120d3a526ee4ca8cfbef
+FROM gcr.io/istio-testing/envoy:a09fc9fc389333b888c3ab1ebf1f79c923a3d0e3
 ADD pilot-agent /usr/local/bin/pilot-agent
 
 COPY envoy_pilot.json      /etc/istio/proxy/envoy_pilot.json
diff --git a/pilot/docker/Dockerfile.proxy_debug b/pilot/docker/Dockerfile.proxy_debug
index a706869cfa61..cb338f9aca0a 100644
--- a/pilot/docker/Dockerfile.proxy_debug
+++ b/pilot/docker/Dockerfile.proxy_debug
@@ -1,5 +1,5 @@
 # Change this and ../../WORKSPACE at the same time
-FROM gcr.io/istio-testing/envoy-debug:e4a0005725b1f117b28c120d3a526ee4ca8cfbef
+FROM gcr.io/istio-testing/envoy-debug:a09fc9fc389333b888c3ab1ebf1f79c923a3d0e3
 ADD pilot-agent /usr/local/bin/pilot-agent
 
 COPY envoy_pilot.json      /etc/istio/proxy/envoy_pilot.json